RBAC
(Hierarchical Role Based Access Control)
RBAC is the authorization library for NodeJS.
🎉 We have supported DynamoDB storage now by implementation of dynamoose.
Motivation
I needed hierarchical role based access control for my projects based on ExpressJS. I had one requirement. This structure must be permanently stored in various storages. For example in memory or Mongoose. Because there is a lot of options for storing of data and many of them are asynchronous. I created asynchronous API. Please, if you found any bug or you need custom API, create an issue or pull request.
Documentation
Read more about API in documentation
Support us
Star this project on GitHub.
Install
npm install rbac
Usage
; // ES5 var RBAC = require('rbac').default;const rbac = roles: 'superadmin' 'admin' 'user' 'guest' permissions: user: 'create' 'delete' password: 'change' 'forgot' article: 'create' rbac: 'update' grants: guest: 'create_user' 'forgot_password' user: 'change_password' admin: 'user' 'delete_user' 'update_rbac' superadmin: 'admin' ; await rbac;
Usage with express
;;; // your custom controller for express { res;} const app = ;const rbac = roles: 'admin' 'user'; await rbac; // setup express routesapp;
Check permissions
const can = await rbac;if can console; // or you can use instance of admin roleconst admin = await rbac;if !admin return console; const can = await admin;if can console;
Mongoose user model
Please take a look on plugin mongoose-hrbac
Build documentation
npm run doc
Running Tests
npm run test
Build
npm run build
Credits
License
The MIT License (MIT)
Copyright (c) 2016-2018 Zlatko Fedor zfedor@goodmodule.com